What to do when you realize your email account has been hacked

If your email account has been hacked, don’t panic, because there are clear and effective steps you can take to regain control and protect your digital security.Finding out that your email account has been hacked can be a scary and frustrating experience.

In a world where we increasingly rely on email for our daily communications, the thought of someone gaining unauthorized access to your private information is unsettling. 

The first thing you should do is confirm that your account has been compromised . Sometimes the first signs can be subtle: emails you didn’t send, login notifications from strange locations, or changes to your settings you didn’t make.

If you notice any of these signs, your account is likely compromised. Confirming the problem as soon as possible will allow you to take immediate steps to protect your information .

So that you don’t panic, we offer you a step-by-step guide on what you should do if you find yourself in this situation .

Confirm that your email account has been hacked

The first step in addressing a hacked account is to confirm that it has actually been compromised. 

So take a good look at your account, you may notice several telltale signs that it has been hacked.

  • Suspicious emails : If you find messages in your inbox that you don’t remember sending, it’s a clear indication that someone else has had access to your account.
  • Login Notifications – Login notifications from unknown locations or devices are a red flag. Review these notifications to identify any unusual activity.
  • Changes in settings : Changes in your email settings, such as automatic forwarding to unknown addresses or changes to your email signature, may indicate that someone is tampering with your account.

Most email providers offer tools to review recent login activity , which you can use to monitor the security of your account. 

Here’s how you can do it in Gmail , follow these steps to check your account logins and all your activity on it:

  • Open Gmail and scroll to the bottom of your inbox.
  • In the bottom right corner , click Details . A new window will open showing the latest activity on your account. You can see the dates, times, locations, and devices from which your Gmail account was accessed. You can also see if there are any simultaneous sessions or suspicious activity.

Change your password immediately

Once the security breach is confirmed, the first thing you should do is change your password

Here are some recommendations to do it effectively, since having a secure password is very important:

  • Choose a strong password – Create a password that is difficult to guess. Use a combination of upper and lower case letters, numbers, and symbols. Avoid using easily accessible personal information, such as your name or date of birth.
  • Use a unique password – Don’t reuse passwords from other accounts. Each account should have its own password to prevent a breach in one account from affecting others.
  • Store your password securely – Use a password manager to store and manage your passwords securely. These programs can generate strong passwords and remember them for you.

If you have Gmail , start by logging into your email account with a secure device.

Here we explain how you can change your Gmail password easily and simply. Just follow these steps:

  • Sign in to your Google account.
  • Select Security in the left panel and go to the How to sign in to Google section.
  • Click Password .
  • Sign in to your Google account again.
  • Enter the new password and confirm it.
  • Click Change Password .

Enable two-factor authentication (2FA)

Two-step authentication is an additional layer of security that can protect your account from future attacks. 

Go to your email account’s security settings and look for the two-step authentication option . Follow the instructions to activate it.

You can also choose to receive codes via text messages , phone calls, or authenticator apps like Google Authenticator or Authy.

Once enabled, test the settings to make sure they work properly. Every time you log in, you’ll be asked for the additional code, making it much harder for hackers to access your account.

Review your account settings and notify your contacts

After securing your account with a new password and enabling 2FA, it’s important to review your account settings to ensure there are no additional changes.

Make sure there are no forwarding rules or filters that are sending your emails to another address without your knowledge. And check that your account recovery information , such as your phone number and alternate email, is up to date and correct.

Also, inform your contacts that your account has been compromised. They may have received suspicious emails from you and should be aware of them so as not to fall for potential scams.

Monitor your account and stay alert

Finally, keep a constant eye on your account to detect any suspicious activity in the future.

Most email services offer the option to review login activity . Do this regularly to detect any unauthorized access.

Make sure your operating system, browser, and any security software are up to date . Updates often include important security patches.

Acting quickly and following these steps can help you mitigate the damage and regain control of your email account. Online security is an ongoing responsibility, and being prepared can make a big difference.